Using the app
Login security
A second step after your password: a passkey, an authenticator app, a texted code or an emailed passcode. Your own, and what the account asks of everyone.
A second sign-in step means a stolen password is not enough on its own. AnswerStack offers four:
| Method | What it is |
|---|---|
| Passkey | Your device's own unlock: Face ID, a fingerprint, Windows Hello or a security key. The strongest |
| Authenticator app | A code from an app such as 1Password, Google Authenticator or Microsoft Authenticator |
| Text message | A code texted to a mobile number you confirm once |
| Emailed passcode | A code emailed to the address you sign in with |
Your own sign-in#
Everyone manages their own, whatever their role. Open the account menu in the top right, choose Personal settings, then Login security. Owners, admins, editors and viewers also reach it from Settings → Login security.
- Add a method and follow the steps. You can hold several passkeys, one for each device, and one of each other method.
- A passkey on your phone also keeps you signed in on the mobile app and unlocks it with Face ID or your fingerprint.
- Remove a method you no longer use, such as a passkey on a lost phone. When the account requires a second step, your only method cannot be removed: set up another one first.
- Recovery codes. You get ten single-use codes with your first method. Save them somewhere safe: each one gets you in once when your phone is not to hand. Generate new codes replaces them all.
Changing your methods asks you to confirm it is you with one you already have.
When you sign in, you give your password and then one of your methods. If none of them works in the browser you are using, choose I cannot use any of these and enter a recovery code.
Too many wrong codes. Ten wrong authenticator or recovery codes in a row pause that step for 15 minutes, then longer each time, up to a day. We email you when it happens: if it was not you, someone has your password, so change it. You can still sign in with another method, and if you have none, our support team can unlock your sign-in once they have checked it is you.
What the account asks of everyone#
Only the owner sets this, on Settings → Login security, under What this account asks of its people:
- Require a second sign-in step, on or off.
- Who it covers: everyone in the account, or owners and admins only.
- Methods your people may use: any of the four. At least one stays on. Some businesses turn off the texted code, because someone who moves a number to their own phone can receive it.
The page warns how many people it covers still have no second step. Nobody is locked out: the next time they sign in, they are asked to add one before they can use the app again, so tell them it is coming.
Tip
Group managers and sales reps do not see Settings. When the account requires a second step of them, they add and manage it from the account menu, under Personal settings → Login security.